You are Here:
Linux Lite 4.4 Final has been released. See the Release Announcements section for more information.



Meltdown & Spectre Information and Discussion

Author (Read 36268 times)

0 Members and 6 Guests are viewing this topic.

Re: Meltdown & Spectre Information and Discussion
« Reply #120 on: February 25, 2018, 05:06:34 PM »
 

The Repairman

  • New to Forums
  • *
  • 36
    Posts
  • Country: 00
  • Reputation: 3

  • Linux Lite: 3.6 64bit

  • CPU: AMD Athlon 64 X2 5000 (2600 MHz)

  • MEMORY: 4Gb

  • VIDEO CARD: NVIDIA G72 [GeForce 7300 LE]
 8)
Last Edit: July 14, 2018, 10:15:45 PM by The Repairman
 


Re: Meltdown & Spectre Information and Discussion
« Reply #121 on: February 26, 2018, 07:16:52 PM »
 

TheDead

  • Gold Level Poster
  • *******
  • 549
    Posts
  • Country: ca
  • Reputation: 51
  • Linux Lite Worshipper
    • My OpenDesktop Projects

  • Linux Lite: 3.8 32bit

  • CPU: HAL9000

  • MEMORY: 1Gb

  • VIDEO CARD: Oculus Rift v.5
Sooo, if Iím on 4.10, I have to revert to 4.4.0-116 to get the fix?
I would think that you would be able to use the 4.15 kernel which you can download and install from the Synaptic Package Manager aka Install/Remove Software.

Go into Synaptic Package Manager / Install/Remove Software center and install linux-headers 4.15 first and then install linux-image 4.15 second.

Do a reboot and you should boot into the new 4.15 kernel.

Do not remove existing kernel in case the new kernel fails to boot.

--------------------------------------------------------------------------------------------------------------------------------

Update
It appears that Lite Tweaks in the Menu under System has a kernel installer so you might want to give that a look at also.


Don't hold me to this as I'm only a Linux Lite user and not a Linux Guru.

Thanks and yep,  I'm gonna keep older kernels because last time I tried 4.13, got a kernel panic on boot. ;)
If 4.15 breaks, I'll go the 4.4.0-116 route.

Now time to read if those fixes slow CPUs down or not, whick was the big worry in the beginning. :-O

Cheers!
- TheDead (TheUxNo0b)

If my blabbering was helpful, please click my [Thank] link.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #122 on: February 26, 2018, 09:42:37 PM »
 

The Repairman

  • New to Forums
  • *
  • 36
    Posts
  • Country: 00
  • Reputation: 3

  • Linux Lite: 3.6 64bit

  • CPU: AMD Athlon 64 X2 5000 (2600 MHz)

  • MEMORY: 4Gb

  • VIDEO CARD: NVIDIA G72 [GeForce 7300 LE]
 8)
Last Edit: July 14, 2018, 10:16:05 PM by The Repairman
 

Re: Meltdown & Spectre Information and Discussion
« Reply #123 on: February 27, 2018, 08:57:32 AM »
 

newtusmaximus

  • Gold Level Poster
  • *******
  • 637
    Posts
  • Country: gb
  • Reputation: 66
  • Paypal Supporter.

  • Linux Lite: 3.6 64bit

  • CPU: Intel Core duo 6300 1.86GHz

  • MEMORY: 4Gb

  • VIDEO CARD: Intel 82Q963/Q965
Vulnerabilities resolved :)
Speed?? has it been reduced.  Tests below.


-Computer-
Processor      : 2x Intel(R) Core(TM)2 CPU          6300  @ 1.86GHz
Memory      : 4037MB (2138MB used)
-Version-
Kernel      : Linux 4.4.0-116-generic (x86_64)

Distribution      : Linux Lite 3.6
-Current Session-
Computer Name      : linuxlite-HP-Compaq-dc7700p-Ultra-slim-Desktop
Desktop Environment      : XFCE 4
-Misc-
Uptime      : 6 hours, 10 minutes
Load Average      : 0.42, 0.56, 0.38


-CPU Blowfish-
<big><b>This Machine</b></big>   1867 MHz   9.806   
Intel(R) Celeron(R) M processor         1.50GHz   (null)   26.1876862   
PowerPC 740/750 (280.00MHz)   (null)   172.816713

-CPU CryptoHash-
<big><b>This Machine</b></big>   1867 MHz   137.318   

-CPU Fibonacci-
<big><b>This Machine</b></big>   1867 MHz   5.082   
Intel(R) Celeron(R) M processor         1.50GHz   (null)   8.1375674   
PowerPC 740/750 (280.00MHz)   (null)   58.07682   

-CPU N-Queens-
<big><b>This Machine</b></big>   1867 MHz   17.196   

-FPU FFT-
<big><b>This Machine</b></big>   1867 MHz   4.524   
   
-FPU Raytracing-
<big><b>This Machine</b></big>   1867 MHz   11.347   
Intel(R) Celeron(R) M processor         1.50GHz   (null)   40.8816714   
PowerPC 740/750 (280.00MHz)   (null)   161.312647

No idea what the above means.  perhaps those more knowledgeable can comment??
Last Edit: February 27, 2018, 09:01:35 AM by newtusmaximus
2006 - HP DC7700p ultraslim Desktop Intel 6300 cpu  4GB Ram LL3.6 64bit.
2007 - Fujitsu Siemens V3405 Laptop  2 GB Ram LL3.6 32bit. Now 32bit Debian 9 + nonfree.
2006 - Fujitsu Siemens Si1520 Laptop Intel T720 cpu 3GB Ram LL4.4 64bit
2003 - RETIRED Toshiba Satellite Pro A10 1 GB RAM LL2.8 32bit
 

Re: Meltdown & Spectre Information and Discussion
« Reply #124 on: February 27, 2018, 01:42:21 PM »
 

TheDead

  • Gold Level Poster
  • *******
  • 549
    Posts
  • Country: ca
  • Reputation: 51
  • Linux Lite Worshipper
    • My OpenDesktop Projects

  • Linux Lite: 3.8 32bit

  • CPU: HAL9000

  • MEMORY: 1Gb

  • VIDEO CARD: Oculus Rift v.5
Thanks @newtusmaximus but  I have no clue what the benchmark numbers mean either. ;)
Guess I'll have to bench the machine before and after all the patches.

Cheers!
- TheDead (TheUxNo0b)

If my blabbering was helpful, please click my [Thank] link.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #125 on: February 27, 2018, 06:00:21 PM »
 

Ottawagrant

  • Forum Regular
  • ***
  • 182
    Posts
  • Country: ca
  • Reputation: 28
  • Linux Lite Member

  • Linux Lite: 4.2 64bit

  • CPU: Intel Duo Core 2 E8400 @ 3.00GHz

  • MEMORY: 12Gb

  • VIDEO CARD: Mesa DRI Intel Q45/Q43
My HP compaq is 9 years old, 3.33MHz, duo core w/8gb RAM. Absolutely no slowdown with the patch installed. My Windows 10 computers, with whatever patch Microsoft has issued, all show slowdown. I only have one computer with an AMD processor, so I use that if I have to use Windows. Next month is Microsoft's Spring update to Windows 10. Better check the drug store flyers for antacid.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #126 on: February 28, 2018, 04:42:54 AM »
 

newtusmaximus

  • Gold Level Poster
  • *******
  • 637
    Posts
  • Country: gb
  • Reputation: 66
  • Paypal Supporter.

  • Linux Lite: 3.6 64bit

  • CPU: Intel Core duo 6300 1.86GHz

  • MEMORY: 4Gb

  • VIDEO CARD: Intel 82Q963/Q965
Re Speed / performance tests. as per my previous post, is there a simple "idiots" guide as to what the results means in real life for the average  computer user?  Thanks
2006 - HP DC7700p ultraslim Desktop Intel 6300 cpu  4GB Ram LL3.6 64bit.
2007 - Fujitsu Siemens V3405 Laptop  2 GB Ram LL3.6 32bit. Now 32bit Debian 9 + nonfree.
2006 - Fujitsu Siemens Si1520 Laptop Intel T720 cpu 3GB Ram LL4.4 64bit
2003 - RETIRED Toshiba Satellite Pro A10 1 GB RAM LL2.8 32bit
 

Re: Meltdown & Spectre Information and Discussion
« Reply #127 on: February 28, 2018, 09:51:44 AM »
 

trinidad

  • Gold Level Poster
  • *******
  • 962
    Posts
  • Country: us
  • Reputation: 174
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 4.4 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown/TechFAQ

I doubt microcode updation will ever appear for anything older than Skylake, and though Intel is already facing over 30 litigations I expect class actions to branch out to include OEMs Dell, HP, Lenovo, and Asus. We've only just begun in Linux with retpoline and it's going to be an application by application case instance without microdode updation for older CPUs. Worse off MS is riddled with potential sleeper applications and the Spring update is probably going to kill off hordes of current Windows 10 users on machines older than Skylake who will find themselves unable to connect to their financial institutions.

TC
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #128 on: March 03, 2018, 07:21:47 AM »
 

trinidad

  • Gold Level Poster
  • *******
  • 962
    Posts
  • Country: us
  • Reputation: 174
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 4.4 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D
The spectre-meltdown-checker received an update today on my Debian machines. I'm going to look now if LL or Ubuntu versions were updated.

Okay checked LL and Ubuntu. LL/Ubuntu version is v0.33 Debian version is v0.35. The only differences in the script I could find is how variant 1 mitigation detection is handled in Debian. Ubuntu uses the original Red Hat patch and Debian does not. v0.33 is okay for LL/Ubuntu even though v0.35 is newer.

TC
Last Edit: March 03, 2018, 08:20:54 AM by trinidad
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #129 on: March 03, 2018, 04:16:51 PM »
 

Jerry

  • Linux Lite Creator
  • Administrator
  • Platinum Level Poster
  • *****
  • 6898
    Posts
  • Country: nz
  • Reputation: 640
  • Linux Lite Member
    • Linux Lite OS

  • Linux Lite: 3.8 64bit

  • CPU: Intel Xeon Dual CPU's E5645 2.4GHz 12 Cores

  • MEMORY: 16Gb

  • VIDEO CARD: nVidia GeForce GTX 960
Debian have their own fork based on their own kernels. Not applicable to LL here which uses Ubuntu kernels. I'd like to keep this LL focused so newbies don't start posting questions about how they are confused. Cheers :)
Last Edit: March 14, 2018, 11:26:01 PM by Jerry
 

Re: Meltdown & Spectre Information and Discussion
« Reply #130 on: March 09, 2018, 06:38:54 PM »
 

Searchernow

  • PayPal Supporter
  • Forum Regular
  • *****
  • 167
    Posts
  • Country: 00
  • Reputation: 7
  • Linux Lite Member

  • Linux Lite: 4.4 64bit

  • MEMORY: 4Gb
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown/TechFAQ

I doubt microcode updation will ever appear for anything older than Skylake, and though Intel is already facing over 30 litigations I expect class actions to branch out to include OEMs Dell, HP, Lenovo, and Asus. We've only just begun in Linux with retpoline and it's going to be an application by application case instance without microdode updation for older CPUs. Worse off MS is riddled with potential sleeper applications and the Spring update is probably going to kill off hordes of current Windows 10 users on machines older than Skylake who will find themselves unable to connect to their financial institutions.

TC


Thanks for all this info, some of which I think (!) I understand, a bit.

I'm using 2 laptops. My i5 CPUs are pre-Skylake ... not sure about the meaning of microcode issues, but I think you're saying it may become a serious problem for those on pre-Skylake cpu computers. Soon?

I use an i5 laptop (1) (single partition) windows 7 ( to run windows-based cad) and so far this year I've not had to go online with it and I don't intend to.

But it does get some files transferred to it (on SD cards or usb) from my i5 linux Lite laptop (2) (dual-boot) which I use online - Firefix & Chromium. I'm not sure if a Windows bug can get onto LL (2) then over to the other laptop (1) running win7?

Longer term - should I be putting money in a piggy-bank for a new computer? Or could I fit new CPU?
SN.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #131 on: March 10, 2018, 05:13:17 AM »
 

newtusmaximus

  • Gold Level Poster
  • *******
  • 637
    Posts
  • Country: gb
  • Reputation: 66
  • Paypal Supporter.

  • Linux Lite: 3.6 64bit

  • CPU: Intel Core duo 6300 1.86GHz

  • MEMORY: 4Gb

  • VIDEO CARD: Intel 82Q963/Q965
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SpectreAndMeltdown/TechFAQ

I doubt microcode updation will ever appear for anything older than Skylake, and though Intel is already facing over 30 litigations I expect class actions to branch out to include OEMs Dell, HP, Lenovo, and Asus. We've only just begun in Linux with retpoline and it's going to be an application by application case instance without microdode updation for older CPUs. Worse off MS is riddled with potential sleeper applications and the Spring update is probably going to kill off hordes of current Windows 10 users on machines older than Skylake who will find themselves unable to connect to their financial institutions.

TC

So what are we saying here please?  Are we saying, even with the patches from the recent Kernel update for LL, because of thepre skylake CPUs, our  older machines are still vulnerable  even when J's  test reports no vulnerabily.

I.e ALL older hardware is now "junk" if used "online".

Can not the anti virus / malware boys evolve their products to screen for "code" that  would exploit these vulnerabilities.?

Very confused as to what all this will mean for the average user.  Does it mean online shopping/ banking etc is potentially now a nono!! ??
2006 - HP DC7700p ultraslim Desktop Intel 6300 cpu  4GB Ram LL3.6 64bit.
2007 - Fujitsu Siemens V3405 Laptop  2 GB Ram LL3.6 32bit. Now 32bit Debian 9 + nonfree.
2006 - Fujitsu Siemens Si1520 Laptop Intel T720 cpu 3GB Ram LL4.4 64bit
2003 - RETIRED Toshiba Satellite Pro A10 1 GB RAM LL2.8 32bit
 

Re: Meltdown & Spectre Information and Discussion
« Reply #132 on: March 15, 2018, 09:02:52 AM »
 

trinidad

  • Gold Level Poster
  • *******
  • 962
    Posts
  • Country: us
  • Reputation: 174
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 4.4 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D
The link below is one of the better explanations of the retpoline mitigation.

https://support.google.com/faqs/answer/7625886

This link is the "claimed" status of Intel's micocode updation which should be taken sceptically not optimistically.

https://newsroom.intel.com/wp-content/uploads/sites/11/2018/03/microcode-update-guidance.pdf

This is from my 5year old AMD A8 HP.

https://imgur.com/a/bWhLr

TC
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #133 on: March 27, 2018, 01:22:59 PM »
 

trinidad

  • Gold Level Poster
  • *******
  • 962
    Posts
  • Country: us
  • Reputation: 174
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 4.4 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D
News

1) Well Intel has made stable microcode available now as far back as Sandy Bridge, however OEM's Dell and HP are still lagging behind in the implementations. Microsoft continues to be ahead of the curve on the whole issue though the latest updations have install issues as well due to the lagging OEM implementations. I have succeeded with a couple of W10 Dell Sandy Bridge boxes but it cannot be done without resorting to the CLI so everyday users are unlikely to install the mc mitigations.

2) New security studies from AMD are dismal for some of their CPU's. See the link below.

https://www.amdflaws.com/

3) Being a regular Debian user I am a bit spoiled when it comes to updates. Debian stable is slow and methodical about such things. But I also use both Ubuntu and LL where update schedules are far denser and hectic. I have to remind myself that so many of the current issues are linked to S/M and Intel. Ubuntu has been on top of the issues since they began and the devs have worked very hard to deal with the changes for their users. Updation was not always so intense with Linux in general, but it is good to remember that Linux is a community and as such more in touch with its own reality in more diverse ways than any corporate entity could ever hope to be. It is discouraging what corporate OEMs have done to everyday people, but it is wonderful to watch the Linux community respond.

TC
All opinions expressed and all advice given by Trinidad Cruz on this forum are his responsibility alone and do not necessarily reflect the views or methods of the developers of Linux Lite. He is a citizen of the United States where it is acceptable to occasionally be uninformed and inept as long as you pay your taxes.
 

Re: Meltdown & Spectre Information and Discussion
« Reply #134 on: March 28, 2018, 12:33:08 PM »
 

Searchernow

  • PayPal Supporter
  • Forum Regular
  • *****
  • 167
    Posts
  • Country: 00
  • Reputation: 7
  • Linux Lite Member

  • Linux Lite: 4.4 64bit

  • MEMORY: 4Gb
Trinidad - thanks for keeping us up-to-date!!  Much appreciated.
SN.
 


 


Linux Lite 4.4 Final has been released. See the Release Announcements section for more information.